
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a101586e-d66c-3895-9373-91d9497be697.roa
File: a101586e-d66c-3895-9373-91d9497be697.roa (raw, json)
Hash identifier: G3GiPpn+J3Em4j/+cCmL6vuo/h97ldpAXHE/5Lk9dEo=
Subject key identifier: 40:D1:D8:40:18:2E:F1:E2:C7:6A:15:3F:1F:C6:DE:EF:7D:A4:BE:23
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584F86DDA6942478271C3BC6BA60
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a101586e-d66c-3895-9373-91d9497be697.roa
Signing time: Sat 17 Oct 2026 01:00:13 +0000
ROA not before: Sat 17 Oct 2026 01:00:13 +0000
ROA not after: Fri 15 Jan 2027 02:00:13 +0000
asID: 132372
IP address blocks: 172.111.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:86:dd:a6:94:24:78:27:1c:3b:c6:ba:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 17 01:00:13 2026 GMT
Not After : Jan 15 02:00:13 2027 GMT
Subject: CN=19e5a09c-00d7-480d-baab-b506cde77edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:3f:a2:b8:84:88:b7:a9:74:22:02:ec:a0:
be:c6:c5:98:4d:65:c7:b0:20:50:58:b0:65:9e:33:
e6:9e:d1:f8:5b:0e:2b:12:17:63:58:d2:56:c4:e5:
be:ed:82:65:1e:76:89:0d:ac:99:e2:dc:cf:0a:bf:
b0:59:ca:fe:d3:e5:52:c6:eb:16:a1:b7:f8:3b:a8:
13:ed:b1:2c:7d:f5:ce:11:d5:6b:bf:04:62:e5:36:
b6:8f:c4:3b:19:c9:76:36:1e:9b:a2:de:14:5e:30:
32:ac:e1:aa:1c:36:84:55:20:93:8d:cc:c2:70:4c:
2f:bb:bd:ac:b4:c3:c2:1d:55:91:b7:a3:55:d1:66:
48:36:cd:e8:10:11:2e:9a:ab:51:9c:12:e9:63:b5:
34:0a:a2:6a:23:3f:49:c6:e5:8f:14:cf:79:d1:e6:
4c:cb:56:14:79:99:00:1c:94:fb:a1:0f:ba:7b:42:
c4:f2:97:be:c7:74:e7:63:25:e6:d4:96:bf:ab:5c:
b6:d6:65:dc:97:71:ec:68:ab:e0:67:9c:04:9d:38:
c6:7d:cb:f2:2e:f2:74:60:28:e8:04:b9:aa:ba:81:
2a:ed:71:6f:32:84:31:2e:bb:81:b6:0b:ec:84:76:
7c:a5:e5:3b:ae:ae:f3:d8:14:ea:19:61:f2:86:78:
83:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D1:D8:40:18:2E:F1:E2:C7:6A:15:3F:1F:C6:DE:EF:7D:A4:BE:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a101586e-d66c-3895-9373-91d9497be697.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:78:e2:c8:44:67:d4:12:0d:bd:1a:fd:f8:b5:e1:4b:67:dd:
b9:b4:37:69:a7:ca:d6:9d:db:97:b4:00:95:5d:be:26:2c:91:
ad:8f:ee:74:d7:87:fb:8e:be:71:34:2c:37:f3:e7:99:5b:1d:
4c:3f:92:d9:63:99:cd:81:aa:54:a5:bc:ee:52:d4:8a:64:f5:
e9:4a:e0:f0:b6:98:b5:57:0e:46:e4:e0:f6:cf:bc:9d:30:3d:
04:7c:86:18:82:73:b5:47:dc:3d:08:62:a5:1f:fc:db:39:8b:
8f:65:fd:76:d0:e4:c7:e0:8f:52:ba:fd:60:16:2f:8b:0c:11:
06:ef:59:5d:a2:80:3f:a0:b7:33:6b:0f:21:01:a3:10:1b:0c:
a3:31:b0:d9:68:85:32:8a:04:f8:da:db:33:7c:83:a0:e4:ee:
1d:03:a8:07:e4:f5:d5:c1:f5:e7:af:39:e8:9d:22:8d:b4:5e:
55:ed:9a:49:97:a6:2f:c4:ab:67:89:de:23:93:91:63:de:66:
27:3c:2e:95:44:01:36:a0:9e:29:13:94:b8:77:65:f4:ab:38:
4f:13:8f:0d:54:74:b6:39:be:24:e2:99:7b:17:eb:bd:d8:01:
a5:65:a5:3f:15:1c:fa:84:21:9e:81:ab:47:7d:87:2f:b9:f3:
2f:22:19:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:12:13 2026 by rpki-client